macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts
Gaslight is a Rust-based backdoor that researchers from SentinelOne have attributed to DPRK-aligned threat actors.
All topics
AI
58 Posts
Mastra AI Hit By npm Compromise
The unknown threat actor gained unauthorized access to legitimate npm accounts, allowing them to inject malicious dependencies into widely used packages.
The Shrinking Exploit Window, Patch Schedule Changes, and the Vulnpocalypse
This week was blessedly free of any major supply chain compromises, so we start by talking about new research from Anthropic on the shrinking window between bug disclosure and exploitation, then we discuss the changing patch schedule for Cisco and how all of this is changing the prioritization process for security teams, and finally we […]
What the Data Tells Us About Claude Mythos and Bug Exploitability | Jay Jacobs and Michael Roytman
Finding a huge pile of bugs with Claude Mythos is great, but the logical next step is figuring out how many of those vulnerabilities are likely to be exploited in the near future. Jay Jacobs and Michael Roytman of Empirical Security join Dennis to talk about how the Exploit Prediction Scoring System can help teams […]
Solving Hard Security Problems With an Outsider’s Perspective | Sravish Sridhar
Unlike a lot of founders in the industry, Sravish Sridhar hasn’t spent his career in the security world. He comes from a background in distributed computing and advanced math, and is a successful entrepreneur who’s now bringing that experience to bear at TrustCloud, where he’s helping CISOs automate and streamline their compliance programs.
AI Has a Security Measurement Problem | Gary McGraw
Few people (if any) have spent more time thinking about and working on the hard problems in security and software than Gary McGraw, and he also happens to have a PhD in cognitive science and computer science and has been studying neural nets and AI systems for 30+ years. Gary joins Dennis to talk about […]